2020, Andrew Hoffman,Web Application Security: Exploitation and Countermeasures for Modern Web Applications[1], O'Reilly,→ISBN:
To eliminate this risk, you should modify your shrinkwrap file to reference GitSHAs, or deploy your own npm mirror that contains the correct versions of each dependency.